EC-Council Acquires Cyber Insurance Academy: A Shift in Insurance Education
EC-Council, renowned for its Certified Ethical Hacker certification, has strategically acquired the Cyber Insurance Academy (CIA), marking its entry into the insurance education market and addressing long-standing gaps in managing emerging risks.
The acquisition by EC-Council, a leader in cybersecurity certification, underscores a significant shift in the insurance industry's approach to emerging technological risks. The delivery of such knowledge comes at a time when insurance carriers are increasingly requiring evidence of AI controls before offering coverage. CIA continues to operate under its brand and leadership, enhancing its program with updated modules focused on AI-related threats and insurance portfolio governance. This development aligns with trends such as the Insurance Services Office's generative AI exclusion endorsements and AI sublimits introduced by some carriers, highlighting the industry's need for education on these evolving requirements.
Implications of AI on Cyber Insurance
IBM's 2026 Cost of a Data Breach Report revealed a stark rise in AI-enabled malicious breaches. With such events making up 25% of all malicious breaches from March 2025 to February 2026, the industry faces an urgent need to adapt. The average cost of these breaches, at $6 million, exceeds the general average, demonstrating the financial ramifications insurers must prepare for. Swiss Re's report further warns that even firms with sizeable cyber limits could be exposed during severe incidents, as average losses often surpass available coverage. These findings indicate a crucial need for the insurance industry to bolster its expertise in AI and cyber threats.
CIA's Education Strategy and Market Evolution
According to Guy Simkin, CIA's CEO, bridging the industry's knowledge gap is essential. Insurance professionals must now possess a deep understanding of technological risks. By leveraging EC-Council's infrastructure and threat intelligence, the CIA plans to keep pace with evolving threats. The updated Certified Cyber Insurance Specialist (CCIS) program will expand to include AI and emerging technology risks posed by autonomous systems and quantum computing. This new educational content, offered in both self-paced and enterprise formats, aims to equip technical and non-technical insurance professionals with necessary insights.
Industry Transition to Accredited Credentials
This acquisition indicates an industry-wide shift towards accredited credentials over carrier-specific training. The need for brokers to guide clients on AI governance and exclusion languages necessitates a robust educational foundation—something the CCIS designation provides by fulfilling continuing education requirements in over 45 U.S. states. Jay Bavisi, EC-Council’s founder and CEO, emphasized the strategic value of joining forces with CIA to combine cyber knowledge with insurance expertise, essential in navigating the AI and cyber-threat landscape.
Key Facts and Figures
- AI-enabled breaches account for 25% of all malicious breaches, with an average cost of $6 million.
- CCIS program updated to version 2, incorporating AI-related threats and governance modules.
- Programs available in self-paced and enterprise formats, targeting both technical and non-technical audiences.
- CCIS satisfies continuing education requirements in over 45 U.S. states.
As the cyber insurance market evolves, bridging the knowledge gap remains vital. The alliance between EC-Council and CIA represents a significant step toward equipping insurance professionals with the skills needed to mitigate new and complex risks, paving the way for a more resilient future in cyber insurance education.